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Abstract 

We find the secrecy capacity of tlie 2-2-1 Gaussian MIMO wire-tap channel, which 
consists of a transmitter and a receiver with two antennas each, and an eavesdropper 
with a single antenna. We determine the secrecy capacity of this channel by proposing 
an achievable scheme and then developing a tight upper bound that meets the proposed 
achievable secrecy rate. We show that, for this channel, Gaussian signalling in the form 
of beam-forming is optimal, and no pre-processing of information is necessary. 



*Tliis work was supported by NSF Grants CCR 03-11311, CCF 04-47613 and CCF 05-14846. 



1 



1 Introduction 



The inherent openness of wireless communications makes it vulnerable to eavesdropping and 
jamming attacks. This vulnerability has to be addressed through secure communications. 
The eavesdropping attack was first studied by Wyner in [1], where he considers a single-user 
wire-tap channel. The measure of secrecy is the message equivocation rate at the wire-tapper, 
which is defined as the entropy of the message at the wire-tapper, given the wire-tapper's 
observation. Wyner models the wire-tapper's channel as a degraded version of the channel 
from the transmitter to the legitimate receiver, which is a reasonable assumption in a wired 
channel. For this channel, Wyner identifies the ratc-cquivocation region and therefore, the 
secrecy capacity. Wyner's result was extended to the Gaussian wire-tap channel in [2], and 
it was shown that Gaussian signalling is optimal. The secrecy capacity was found to be the 
difference between the capacities of the main and the eavesdropping channels. 

Csiszar and Korner [3] studied the general, i.e., not necessarily degraded, single-transmit- 
ter, single-receiver, single-eavesdropper, discrete memoryless channel with secrecy constraints, 
and found an expression for the secrecy capacity, in the form of the maximization of the 
difference between two mutual informations involving an auxiliary random variable. The 
auxiliary random variable is interpreted as performing pre-processing on the information. 
The explicit calculation of the secrecy capacity for a given channel requires the solution of 
this maximization problem in terms of the joint distribution of the auxiliary random variable 
and the channel input. 

The use of multiple transmit and receive antennas has been shown to increase the achiev- 
able rates when there are no secrecy constraints [4]. The Gaussian multiple-input multiple- 
output (MIMO) wire-tap channel is a special case of the single-transmitter, single-receiver, 
single-eavesdropper wire-tap channel. Since the Gaussian MIMO channel is not degraded in 
general, finding its secrecy capacity involves identifying the optimum joint distribution of the 
auxiliary random variable representing pre-processing and the channel input in the Gsiszar- 
Korner formula. However, solving this optimization problem directly for non-degraded chan- 
nels is difficult, forcing researchers typically to follow a two-step solution, where in the first 
step a feasible solution is identified (an achievable scheme), and in the second step a tight 
upper bound that meets this feasible solution is developed (tight converse). 

The first paper studying secrecy in MIMO communications is [5], which proposes an 
achievable scheme, where the transmitter uses its multiple transmit antennas to transmit 
only in the null space of the eavesdropper's channel, thereby preventing any eavesdropping. 
Reference [6] studies the Gaussian single-input multiple-output (SIMO) wire-tap channel, 
and shows that it is equivalent to a scalar Gaussian channel, and gives the secrecy capacity 
using the results of [2]. An achievable scheme has been proposed for the Gaussian multiple- 
input single-output (MISO) wire-tap channel in [7], and independently and concurrently 
in [8]. In both of these papers, the achievable secrecy rate is obtained by restricting the 
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channel input to be Gaussian, with no pre-processing of information. The secrecy rate found 
in [7,8] is shown to be the secrecy capacity of the Gaussian MISO wire-tap channel in [9, 10]. 
Further, [9,10] allow the eavesdropper to have multiple antennas (MISOME). 

In all of the above papers, the secrecy capacity of MIMO communications is specified 
only in the cases where the receiver has a single antenna. The next step towards finding the 
secrecy capacity of the general Gaussian MIMO channel is to consider multiple antennas at 
the receiver. In this paper, we consider a MIMO channel where both the transmitter and 
the receiver have multiple antennas. Since the general problem seems to be intractable for 
now, we focus on a simple special case where both the transmitter and the receiver have 
two antennas each, and the eavesdropper has a single antenna, hence we call this channel 
the 2-2-1 MIMO wire-tap channel. We find the secrecy capacity in two steps: we first 
propose an achievable scheme, which is a Gaussian signalling scheme with no pre-processing 
of information, and then, we develop a tight upper bound that meets the rate achieved with 
our proposed signalling scheme. 

We first show that the optimal Gaussian signalling scheme has a unit-rank transmit co- 
variance matrix, hence with Gaussian signalling, beam-forming is optimal. The transmitter 
beam-forms in a direction that is as orthogonal to the direction of the eavesdropper, and as 
close to the two directions of the receiver as possible. Then, we develop an upper bound by 
considering a channel where the eavesdropper's signal is given to the receiver. The secrecy 
capacity of this channel is an upper bound to the secrecy capacity of the original channel. 
In addition, this channel is degraded, and no pre-processing of information is needed. Fur- 
thermore, Gaussian signalling is optimal for this channel. We further tighten this bound 
by allowing correlation between the additive noises of the receiver and the eavesdropper. 
For a certain such correlation, we prove that the optimal Gaussian signalling is unit-rank in 
this upper bound also. We then evaluate our upper bound and show that it meets the rate 
achievable with our proposed signalling scheme. In this 2-2-1 system, the fact that both in 
our achievable scheme and in our upper bound, the optimal transmit covariance matrices 
turn out to be unit-rank, proves to be crucial in enabling us to characterize the lower and 
upper bounds explicitly and showing that they are equal. 

Secure communications in multi-user networks, e.g., multiple access channel [11-15], 
broadcast channel [16], relay channel [17,18], interference channel [19], and two-way chan- 
nel [20], and in fading channels [7,21-25] have been considered recently. 

We use the following notations throughout this paper: Bold face lower and upper case 
letters are used to represent vectors and matrices, respectively, and ||x|| denote the 
transpose and the Euchdean norm of the vector x, respectively. tr(X) and |X| denote the 
trace and the determinant of the square matrix X, respectively. Whether a variable is 
deterministic or random will be clear from the context. 
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2 System Model 



The 2-2-1 Gaussian MIMO wire-tap channel is characterized by 



(1) 
(2) 



where X is the transmitted signal, and y, z are the received signals at the legitimate user and 
the eavesdropper, respectively, n^^ is a Gaussian random vector with zero-mean and identity 
covariance matrix, while Uz is a Gaussian random variable with zero-mean and unit-variance. 
Uy, riz are assumed to be independent. The transmitted signal satisfies an average power 
constraint, 



The secrecy capacity C{P) is defined as the maximum number of bits that can be correctly 
transmitted to the intended receiver while the eavesdropper is essentially no better informed 
about the transmitted information after observing the received signal than it was before [2]. 

When H is not full-rank, by performing singular value decomposition (SVD) on H and 
obtaining an equivalent channel by rotation, it can be shown that the system is equivalent 
to a 2-1-1 system, whose secrecy capacity has been found in [9,10]. Therefore, without loss 
of generality, for the rest of the paper, we assume that H is full-rank, and hence is invertible. 
When 



z can be written as a noisy version of y, i.e., r^^y -|- n, which means that the channel is 
degraded. In this case, no pre-processing of information is necessary [3], and also it can be 
shown that Gaussian signalling is optimal. Thus, in this paper, we concentrate on the more 
interesting and difficult case where H is full-rank and satisfies 




(3) 



i=l 



H-^g|| < 1 



(4) 




(5) 



3 An Achievable Scheme 



By [3], the following secrecy rate is achievable. 




(6) 
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where u ^ x — yz. By taking u = x and constraining the input signal x to be Gaussian 
with covariance matrix S such that tr(S) < P, the following secrecy rate is achievable, 



^log|l + HSH^|-^log(l + g^Sg) 



(7) 



Thus, the following secrecy rate is achievable 



max -logll + HSH^I - -log(l + g^Sg) (8) 

SbO:tr(S)<P 2 ^' I 2 ^ ^ ' 

unless the maximum value in ([8]) is negative, in which case, the achieved secrecy rate is zero. 
Ignoring the 1/2, we may rewrite the cost function in ([8]) as 

log |I + HSH^I - log (1 + g^Sg) = log |H- H^HS| - log (l + g^Sg) (9) 

We first use the following lemma to show that the S that maximizes ([8]) is unit-rank. 
Lemma 1 IfD is a 2 x 2 invertible matrix that satisfies 

g^D^ig > 1 (10) 

then the optimal S that solves the following optimization problem 

max logll + DSI -log(l + g^Sg) (11) 

SbO,tr(S)<P I I V / 

is unit-rank. 

Proof: The KKT necessary conditions for the optimization problem in (fTT!) are 

S* ^ (12) 

tr(S*) < P (13) 

C ^ (14) 

A > (15) 

A(tr(S*) -P) = (16) 

CS* = (17) 

-(I + DS*)-^D + ^ ^ gTg.g gg^ - C + AI = (18) 
We will prove the claim by contradiction. Assume that the optimal S is full-rank. Then, 
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from (fTTIl . it follows that C = 0, i.e, ( JTSjl becomes 



Since D is invertible 



(I + DS*)-iD = ^_^gg^ + AI (19) 

1 + b*K 



(I + BST' = -— 4^gg^D-i + AD-i (20) 



Using the matrix inversion lemma [26, page 19], we have 

1 1 



i.e.. 

We multiply both sides of (!22|) with g'^ on the left and g on the right. Let us define 
7 = g"'"S*g, which is a non-negative real number. Then, we have 



llgl 


2 


lgl 


14 


A 


A2 + A2 


'7- 


f A| 


|g| 


2 



7 = ^ - , - g^D-g (23) 

i.e., we have 

7^ + (1 + g^D-ig) 7 + g^D^ig + ^ (g^D-ig - 1) = (24) 



|2 



Because g-^D^^g — 1 > 0, the second-order equation in (!24l) has no non-negative roots, i.e., 
it either has no real roots, or it has two negative roots. Thus, we arrive at a contradiction. 
Therefore, C cannot be equal to 0, and consequently, S cannot be full-rank, and it has to 
be unit-rank. ■ 

Since H^H is invertible and satisfies ([5]), D = H^H satisfies the condition of Lemma [TJ 
Hence, the optimal S for the optimization problem in ([8]) is unit-rank. 
Given that the optimal S is unit-rank, it can be written as 

S = Pqq^ (25) 
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The corresponding achievable secrecy rate is 

i? = ^ log |I + PHqq^H^I - ^ log(l + Pg^qq'^g) (26) 

1 q^(I + PH^H)q 

2 ^ q^(I + Pgg^)q 

where (1271) is now in the Rayleigh quotient [26, page 176] form and the optimal achievable 
q, which we will call q^, is 

where is the eigenvector that corresponds to the largest eigenvalue of B~^/^AB~^/^ with 

A =1 + PH^H (29) 
B =1 + Pgg^ (30) 

In other words, qa is the unit-norm eigenvector that satisfies 

(I + Pgg^)"' (I + PH^H) q, = Aiq„ (31) 

where Ai is the largest eigenvalue of the matrix 

(I + Pgg^ (I + PH^H) (I + Pgg^ -^/^ (32) 

Written explicitly, the achievable secrecy rate is 



1 / l + Pq^H^Hq, \ ^ 1 

2 U + ^qlgg^qa ; 2 



iog( .:^„":;i;r ) = ^iogA. (33) 



Next, we show that the secrecy rate in (!33l) is in fact strictly positive. By picking 
S = Pg"*" (g"*")"^, where g^ is the unit-norm vector that is orthogonal to g, an achievable 
secrecy rate is 

^log(l + P||Hg^|f) (34) 

Since H is full rank, Hg-*- 7^ 0, i.e., the secrecy rate in flM|) is strictly positive. Since the 
secrecy rate in ( !33l) is the maximum over all S satisfying tr(S) < P, we conclude that 

1 1 

-logAi>-log(l + P||Hg^||') >0 (35) 
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which also means that 



Ai > 1 



(36) 



4 A Tight Upper Bound 



The following theorem provides an upper bound on the secrecy capacity of the wire-tap 
channel described in ([T]) and ([2]). 

Theorem 1 An upper bound on the secrecy capacity of the wire-tap channel described in ^ 
and ^E) is 



max f/(S,a) 

SbO,tr(S)<P 

for any a with ||a|| < 1, where f/(S,a) is defined as 
with N defined as 



(37) 



(3^ 



N 



I a 

a^ 1 



(39) 



and H defined as 



H 



H 



(40) 



The proof of Theorem [T] is provided in the Appendix. Intuitively, this upper bound is 
obtained by considering the secrecy capacity of a new channel where the legitimate receiver 
also has access to the eavesdropper's signal. Since the legitimate user is more capable in the 
new channel, the secrecy capacity of the new channel will serve as an upper bound on the 
secrecy capacity of the original channel. The new channel is degraded, and therefore the 
secrecy capacity is easier to obtain. 

The vector a introduced in Theorem [1] is the correlation between the Gaussian noises at 
the legitimate user and the eavesdropper, i.e.. 



a = E\p.yn-^ 



(41) 
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We note that a thus defined has to satisfy ||a|| < 1 for N in (!39l) to be positive semi- 
definite. Introducing correlation between Uy and does not change the secrecy capacity of 
the channel, but changes the upper bound in (|37j) . In fact, (|3711 remains a valid upper bound 
for any a, with ||a|| < 1. Thus, we will smartly pick an a vector, and show that the upper 
bound with this a vector is in fact tight, to establish the secrecy capacity. 
We rewrite f/(S, a) as 



^ ^ 1 |l + H^N-iHS| 
f/(S,a) = -log 



(42) 



By the definition of N in (15^ , we have 



I + iaa^ 



I 

k 



(43) 



where k = 1— ||a|p. Then, 



H^N^H = H^H + ^H^aa^H - ^ga^H - ^H^ag^ + rgg^ 

k k^ k ^ k^^ 



H^H+i(H^a-g) (H^a-g)^ 



(44) 
(45) 



Let us define A (a) as 



A(a) = H^N-^H = H^H + - (H^a - g) (H^a - g)^ 



(46) 



Then, f/(S,a) in (H2ll is written as 



[/(S, a) = i log |I + A(a)S| - ^ log (l + g^Sg) 



(47) 



Let us also define qf to be the unit-norm vector that is orthogonal to q^, which is defined 
in (EHD. 

We pick a to be of the form 



a = H-^ (aq^ + g) 



(48) 



for any real number a that makes ||a|| < L a = results in a = H^-^g, which is a vector 
with norm greater than 1, and therefore, is not permissible. 

Then, with this selection of a, A (a) in fH6l) can be written as 



A(a) = H^H + ^(a)q,^(q;[)^ 



(49) 
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where 9{a) is defined as 



Oia) ^ ^-^ (50) 

(51) 



«2 



1 - (H-^ {aqi + g)y (H-^ (aq„^ + g)) 

Then, we have 



This is a second-order polynomial in terms of l/a, and it is easy to see that 1/a* maximizes 
9{a), with 

a* l-g^(Hm)"^g ^ ^ 

Finally, we call the a vector that we pick a*, which is given as 

a* = H-^(«*q^ + g) (54) 

First, we will prove that a* has norm no greater than 1. Let us define ao to be 



T 

= iijj^Ji. Hq, (55) 



ao satisfies the form of a in ( HHl) because H"^ao — g is orthogonal to q^, hence, it is along the 
direction of q^. Therefore, ao must correspond to an a, which we call ao- It can be seen 
that 

||ao|| = ^-^<l (56) 

because of f l36l) and the fact that q^ satisfies f l33l) . i.e., 

l + P||HqJp 

1 + P(g^ (laY 

Hence, (1561) means that ao 7^ and furthermore, we have 

2 

^(ao) = ^ \ > (58) 
i — aQ ao 
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Therefore, we have 



1 ('^) 1 

> — — > (59) 



e{a*) - e{ao) 

where (a) follows because a* maximizes g^^- Finally, ( |59l) implies ||a*|| < 1 because of ( l50l) . 

Next, we will show that the optimal S for maxt/(S,a*) in ( |371) is unit-rank. Since the 
upper bound and achievable scheme differ only in replacing A (a*) with H^H, as shown in 
([8]) and fHTl) , we will use Lemma [1] again to show the optimality of unit-rank S in fl37|) . 
Since H^H is invertible and 6{a*) > 0, matrix A(a*), in the form of ( H9l) . is invertible. In 
addition, in order to use Lemma 1, we need g^A(a*)^^g > 1. In the following, we will show 
that g^A(a*)^^g = 1. Using the matrix inversion lemma [26, page 19] on (H9l) . we have 

A(a-)- = (H-H)- - . ^, , (H^H)-,^^ {^f (H-H)"' (60) 

Also, from ([52]) and ([53]), l/9{a*) is equal to 

{ci-f (H-H)-^ + \'J_, (61) 



e{a*) ^ ; ' gT(HTH)-ig-l 

^-K)-f(H^H)--("^")"gg\("^")"^q^ (62) 

\^a) \\ ) g^(H^H)" g-1 / 

= -(q,^)^(H^H-gg^)-^q„^ (63) 

Now, using straightforward algebra, starting from fl60|) and fl6T!) . it is easy to verify that 

g^A(a*)-ig = 1 (64) 

Thus, D = A(a*) satisfies the conditions of Lemma [H and therefore, argmaxf/(S, a*) is 
unit-rank. 

Thus, for the selected a*, the optimization in the upper bound in fl37|) over S ^ reduces 
to an optimization over q, as S = Pqq^, 

1 q^ (l + PH^H + P^(a*)qf (qf )^) q 

max ?7(S, a*) = max - log tf-. — (65) 

Sbo,tr(s)<J' q 2 ^ q^(I + Pgg^)q ^ ' 

where ( 165!) is again in the Rayleigh quotient [26, page 176] form, and the solution to this 
optimization problem is the largest eigenvalue of the matrix 

(I + Pgg^)-^/2 (l + PH^H + P^(a*)q;^ (q;^)^) (I + Pgg^)"^/^ (66) 
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which is the largest eigenvalue of the matrix 

(I + Pgg^)-^ (l + PH^H + P9ia*)qt {<itf) (67) 

since the two matrices are related by a similarity transformation. Note that 

(I + Pgg^r' (l + PH^H + Pe{a*)qi (qf = (I + Pgg^)"^ (l + PH^H) q, (68) 

= Aiq, (69) 



where ( l69l) follows from (l3Ti) . 
Let us define vector qi as 



qi = -^(«*)(H^H-gg^)~'q;^ (70) 

Note that 

qfqa^ = -Oic^n {qjf (H^H - gg^)"^ q,^ = 1 (71) 
where the last equality follows from fl^ . Also, fl7U]l implies that 

H^Hqi = gg^qi - e{a*)ci^ (72) 

Then, we have 

(I + Pgg^)-i (l + PH^H + P9{a*)qj {qjf^ 

= (I + Pgg^)-^ ((I + PH^H) qi + P^^(a*)q;^) (73) 
= (I + Pgg^)-^ (qi + Pgg^qi - P9ia*)qi + PO{a*)qi) (74) 
= (I + Pgg^)^i(I + Pgg^)qi (75) 
= qi (76) 

where f l73|) follows from flTTl) . and fl74l) follows from fl72|) . This means that the eigenvalues 
of the matrix in (1571) . and also the eigenvalues of the matrix in fl5B]) . are Ai and 1. Since 
Ai > 1, as shown in (!36|) . the resulting maximum value in (l65l) is |logAi. Hence, the upper 
bound on the secrecy capacity, i.e.,maxs^o,tr(s)<p f^(S, a*), is |logAi, which is equal to the 
lower bound on the secrecy capacity shown in (!33|) . 
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5 Conclusions 



We determined the secrecy capacity of the 2-2-1 Gaussian MIMO wire-tap channel, by solving 
for the optimum joint distribution for the auxiliary random variable and the channel input 
in the Csiszar-Korner formula. First, we proposed a lower bound on the secrecy capacity 
by evaluating the Csiszar-Korner formula for a specific selection of the auxiliary random 
variable and the channel input. Our achievable scheme is based on Gaussian signalling 
and no pre-processing of information. Even for this achievable scheme, which is completely 
characterized by the transmit covariance matrix S, a closed form solution for the secrecy rate 
does not exist. However, in our 2-2-1 case, we have shown that the optimal transmission 
scheme is unit-rank, i.e., beam-forming is optimal. 

We showed the optimality of the proposed achievable scheme by constructing a tight 
upper bound that meets it. The upper bound is developed by considering the secrecy capacity 
of a channel where the eavesdropper's signal is given to the legitimate receiver. Even though 
this upper bound is well-defined for a general MIMO wire-tap channel, explicit evaluation and 
tightening of this upper bound has been possible by restricting ourselves to the 2-2-1 case. 
As in the lower-bound, and by selecting a certain correlation structure for the additive noises, 
we have shown that beam-forming is optimal for the upper bound as well. Furthermore, we 
have shown that the optimal beam-forming directions in the lower and upper bounds are the 
same. Finally, we have shown that the two bounds meet yielding the secrecy capacity. 

Our derivation is specific to the 2-2-1 case and we have not been able to show that these 
lower and upper bounds meet in the general MIMO channel. This is because the unit-rank 
(beam-forming) property of the optimum transmit matrices is essential in our derivations, 
while beam-forming is not likely to be the optimal strategy when the number of transmit 
and receive antennas is more than two. Even though the results presented in this paper 
are a non-trivial step towards the solution of the general MIMO wire-tap problem, whether 
our techniques can be useful in determining the secrecy capacity of larger MIMO systems is 
unclear. 

6 Appendix 

Proof of Theorem [TJ A proof of similar results is presented for the case of m-l-n system, 
m, n > 1, in [10, Lemma 1, 2]. Our proof utilizes [10, Lemma 1], which generalizes to the 
case of multiple antennas at the legitimate receiver easily, and extends [10, Lemma 2] to the 
case where there are two antennas at the legitimate receiver. 

An upper bound on the secrecy capacity of the wire-tap channel described in ([1]) and ([2]) 
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is [10, Lemma 1] 



max 

p(x):£;[x^x]<P 



^(x;y|2) 



(77) 



Since we have 



/(x;y|2;) = /(x; 



y,z) - /(x; z) 



(78) 



Intuitively, the upper bound is obtained by considering the secrecy capacity of a new channel 
where the legitimate receiver also has access to the eavesdropper's signal. Since the legitimate 
user is more capable in the new channel, the secrecy capacity of the new channel will serve 
as an upper bound on the secrecy capacity of the original channel. The new channel is 
degraded, and therefore the secrecy capacity formula is ( ITHj) . obtained by setting u = x as 
shown in [3]. 

In evaluating the right-hand side of (1771) . we introduce correlation between Uy and n^, 
i.e., let us define a to be 



We note that a thus defined has to satisfy ||a|| < 1. To avoid irregular cases, we will only 
consider a such that ||a|| < 1. We also note that a does not affect the secrecy capacity of 
the original channel, but it affects the upper bound in ( 1771) . Thus, (1771) remains an upper 
bound for any a with ||a|| < 1. 
We evaluate /(x;y|2;) as follows. 



a = E[nyn^] 



(79) 



/(x;y|z) = h{y\z) - h{y\z,x.) 

= h{y\z) - h{ny\n^) 



(80) 
(81) 



Due to the Gaussianity of the noise. 



h{ny\n,) = /i(ny,n^) - h{n^) = -log(27re)^ |N 



(82) 



where N is defined as in f l39|) . Let us define S as 



S = E[xx^] 



(83) 
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then 



E[yz] = E [(Hx + n^) (x^g + n,)] = HSg + a 
£;[z2] = l + g^Sg 
^[yy^] =I + HSH^ 

The hnear minimum mean squared error (LMMSE) estimator of y using z is 

. HSg + a 
1 + g^Sg 

and the resulting covariance matrix of the estimation error is 

1 



I + HSH^ - 



1 + g^Sg 



(HSg + a)(HSg + a)^ 



Hence, 



u( \ \ u\ HSg + a 



1 



<^log(27re)2 



1 + g^Sg 

I + HSH^ - 



1 



1 + g'^Sg 



(HSg + a) (HSg + a)'^ 



Therefore, 



/(x;y|^) < - log 



= 2 log 



- log 
2 ^ 



I + HSH^ - (HSg + a) (HSg + a)' 



INI 



(I + HSH^) (1 + g^Sg) - (HSg + a) (HSg + a)' 



(l + g^Sg)|N| 
I + HSH^ HSg + a 
g^SH^ + a^ 1 + g^Sg 



(l + g^Sg)|N| 
|N + HSH^| 



2 °(l + g^Sg)|N| 
1 |l + N-iHSH^| 
2^°^ (1 + g^Sg) 
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where H is defined as in (HOl). Thus, we have 



1 |l + N-iHSH^| ^ ^ 

max /(x:y L2)< max tt log — „^ , — - (97) 

p{x):i?[xrx]<P ^ ' ' ' - ShO,tr{S)<P 2 ^ (1 + g^Sg) ^ ' 

Therefore, an upper bound on the secrecy capacity of the wire-tap channel described in ([1]) 
and P is 

max f/(S, a) (98) 

StO,tr{S)<P 

for any a with ||a|| < 1, with f/(S,a) defined in fl38l) . 
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